Website A is a WordPress website.
Website B is a custom website which requires access to the WordPress API to retrieve data.
A user always logs in into WordPress (website A). There it can click a button which will open a new tab/window with the custom website (website B). A user will not login into the custom website directly.
How can I manage this?
My idea was to use (JWT) tokens. To either:
- send the access (and refresh?) token to the custom website as url parameter, or
- send the access (and refresh?) token to the custom website as POST (but in this case I require a back-end process as well).
Is there a plugin or method to generate the button link to incorporate the token(s) as url parameter (preferred) or as POST argument?
Maybe relevant links: